检索结果-内蒙古大学图书馆

A Secure Middlebox Framework for Enabling Visibility Over Multiple encryption protocols

IEEE-ACM TRANSACTIONS ON NETWORKING 2020年第6期28卷 2727-2740页

作者： Han, Juhyeng Kim, Seongmin Cho, Daeyang Choi, Byungkwon Ha, Jaehyeong Han, Dongsu Korea Adv Inst Sci & Technol Sch Elect Engn Daejeon 34141 South Korea Sungshin Womens Univ Dept Convergence Secur Engn Seoul 02844 South Korea

Network middleboxes provide the first line of defense for enterprise networks. Many of them typically inspect packet payload to filter malicious attack patterns. However, the widespread use of end-to-end cryptographic protocols designed to promote security and privacy, either inhibits deep packet inspection in the network or forces enterprises to use solutions that are not secure. This article introduces a complete framework for building secure and practical network middleboxes, called EVE, which enables visibility over encrypted traffic. EVE securely processes encrypted traffic using a combination of hardware-based trusted execution and software security technology. For enhanced programmability and security, EVE provides a high-level programming interface based on the Rust language. The high-level APIs of EVE provide security and significantly ease the development effort by hiding the details of cryptographic operations, enclave processing, TCP reassembly, and out-of-band key sharing. Our evaluation shows EVE supports diverse use cases with multiple encryption protocols in a secure fashion while delivering high performance.

关键词： Middleboxes encryption protocols Programming Servers Network middleboxes encryption protocols trusted execution environment (TEE) deep packet inspection

来源：评论

学校读者我要写书评

暂无评论

Smart Card-Based Vehicle Ignition Systems: Security, Regulatory Compliance, Drug and Impairment Detection, Through Advanced Materials and Authentication Technologies

引用

PROCESSES 2025年第3期13卷 911-911页

作者： Vitiello, Vincenzo Benazzi, Alessandro Trucillo, Paolo Inventori Cavensi Via 25 Luglio 87 I-84013 Cava De Tirreni Italy Slim Architetti Via Savio 1087 I-47522 Cesena Italy Univ Naples Federico II Dipartimento Ingn Chim Mat & Prod Ind Ple V Tecchio 80 I-80125 Naples Italy

This study investigates the integration of smart card readers into vehicle ignition systems as a multifaceted solution to enhance security, regulatory compliance, and road safety. By implementing real-time driver verification, encryption protocols (AES-256, RSA), and multifactor authentication, the system significantly reduces unauthorized vehicle use and improves accident prevention. A critical advancement of this research is the incorporation of automated drug and impairment detection to prevent driving under the influence of substances, including illicit drugs and prescription medications. Risk models estimate that drug-related accidents could be reduced by 7.65% through the integration of these technologies into vehicle ignition systems, assuming high compliance rates. The study evaluates drug applications leveraging the same sensor-based monitoring technologies as used for impairment detection. These systems can facilitate the real-time tracking of medication intake and physiological responses, offering new possibilities for safety applications in medical transportation and assisted driving technologies. High-performance polymers such as polyetheretherketone (PEEK) enhance the durability and thermal stability of smart card readers, while blockchain-based verification strengthens data security and regulatory compliance. Despite challenges related to cost (USD 100-300 per unit) and adherence to ISO standards, these innovations position smart card-based ignition systems as a comprehensive, technology-driven approach to vehicle security, impairment prevention, and medical monitoring.

关键词： smart card readers vehicle ignition systems automotive security multifactor authentication encryption protocols blockchain technology CAN bus compatibility driver credential verification automotive cybersecurity frameworks

来源：评论

学校读者我要写书评

暂无评论

Dual on-premises storage framework for memory optimization and secure data transmission in nuclear power plants

引用

NUCLEAR ENGINEERING AND TECHNOLOGY 2025年第7期57卷

作者： Gharaei, Niayesh OSTIM Tech Univ Fac Engn Dept Comp Engn Ankara Turkiye

In nuclear power plants, efficiently managing sensitive data and ensuring secure transmission between nodes and storage systems are critical for maintaining operational integrity and safety. This paper proposes a novel approach utilizing dual on-premises storages to enhance memory efficiency and ensure secure data transmission. By segregating sensitive and non-sensitive data into distinct storage units, the system optimizes memory utilization while maintaining robust security protocols for data transfer between Base Stations (BS) and storage nodes. The architecture integrates advanced encryption techniques and secure protocols to safeguard data integrity during transmission, thereby mitigating risks associated with unauthorized access and data breaches. Experimental validation and performance analysis an average improvement of 25 % across encryption time, decryption time, failure rate, and latency metrics compared to existing methods.

关键词： Dual on-premises storage encryption protocols Data security Memory efficiency Nuclear power plants

来源：评论

学校读者我要写书评

暂无评论

encryption Protocol for Resource-Constrained Devices in Fog-Based IoT Using One-Time Pads

引用

IEEE INTERNET OF THINGS JOURNAL 2019年第2期6卷 3925-3933页

作者： Boakye-Boateng, Kwasi Kuada, Eric Antwi-Boasiako, Emmanuel Djaba, Emmanuel Ghana Inst Management & Publ Adm Sch Technol Accra Ghana

Fog computing allows data to be processed on the network edge without reaching the cloud infrastructure to reduce latency and network bandwidth. However, it is not without its security challenges as existing security protocols, implemented in the fog, do not fully cater for the mobility and heterogeneity of the fog, especially on resource-constrained fog nodes. As such, this increases latency and overhead on those nodes which also affects the fog. This paper investigates the possibility of creating a one-time pad (OTP)-based encryption protocol with no packet loss;lesser time and energy overheads as compared to protocols that have been proposed by existing research. The protocol will be tested on wireless sensor nodes, which are resource constrained, and the outcome monitored. The OTPs will be generated using a random number generator within the nodes. Outcomes are positive and can be implemented on resource-constrained fog nodes.

关键词： Cloud encryption protocols fog computing one-time pads (OTPs) security wireless sensor networks

来源：评论

学校读者我要写书评

暂无评论

An Advanced encryption Standard Powered Mutual Authentication Protocol Based on Elliptic Curve Cryptography for RFID, Proven on WISP

引用

JOURNAL OF SENSORS 2017年第8-31期2017卷 1-10页

作者： Ibrahim, Alaauldin Dalkilic, Gokhan Dokuz Eylul Univ Comp Engn Dept TR-35160 Izmir Turkey

Information in patients' medical histories is subject to various security and privacy concerns. Meanwhile, any modification or error in a patient's medical data may cause serious or even fatal harm. To protect and transfer this valuable and sensitive information in a secure manner, radio-frequency identification (RFID) technology has been widely adopted in healthcare systems and is being deployed in many hospitals. In this paper, we propose a mutual authentication protocol for RFID tags based on elliptic curve cryptography and advanced encryption standard. Unlike existing authentication protocols, which only send the tag ID securely, the proposed protocol could also send the valuable data stored in the tag in an encrypted pattern. The proposed protocol is not simply a theoretical construct;it has been coded and tested on an experimental RFID tag. The proposed scheme achieves mutual authentication in just two steps and satisfies all the essential security requirements of RFID-based healthcare systems.

关键词： encryption protocols Radio frequency identification systems Elliptic curve cryptography Medical history Medical informatics

来源：评论

学校读者我要写书评

暂无评论

A Secure Network Coding Based on Broadcast encryption in SDN

引用

MATHEMATICAL PROBLEMS IN ENGINEERING 2016年第1期2016卷 1-8页

作者： Chen, Yue Jia, Hongyong Huang, Kaixiang Lan, Julong Yan, Xincheng State Key Lab Math Engn & Adv Comp Zhengzhou 450001 Peoples R China China Natl Digital Switching Syst Engn & Technol Zhengzhou 450002 Peoples R China

By allowing intermediate nodes to encode the received packets before sending them out, network coding improves the capacity and robustness of multicast applications. But it is vulnerable to the pollution attacks. Some signature schemes were proposed to thwart such attacks, but most of them need to be homomorphic that the keys cannot be generated and managed easily. In this paper, we propose a novel fast and secure switch network coding multicast (SSNC) on the software defined networks (SDN). In our scheme, the complicated securemulticastmanagement was separated from the fast data transmission based on the SDN. Multiplemulticasts will be aggregated to onemulticast group according to the requirements of services and the network status. Then, the controller will route aggregated multicast group with network coding;only the trusted switch will be allowed to join the network coding by using broadcast encryption. The proposed scheme can use the traditional cryptography without homomorphy, which greatly reduces the complexity of the computation and improves the efficiency of transmission.

关键词： LINEAR network coding encryption protocols SOFTWARE-defined networking (Computer network technology) ROBUST statistics MULTICASTING (Computer networks)

来源：评论

学校读者我要写书评

暂无评论

A Novel 1D Hybrid Chaotic Map-Based Image Compression and encryption Using Compressed Sensing and Fibonacci-Lucas Transform

引用

MATHEMATICAL PROBLEMS IN ENGINEERING 2016年第1期2016卷 1-15页

作者： Zhang, Tongfeng Li, Shouliang Ge, Rongjun Yuan, Min Ma, Yide Lanzhou Univ Sch Informat Sci & Engn Lanzhou 730000 Gansu Peoples R China

A one-dimensional (1D) hybrid chaotic system is constructed by three different 1D chaotic maps in parallel-then-cascade fashion. The proposed chaotic map has larger key space and exhibits better uniform distribution property in some parametric range compared with existing 1D chaotic map. Meanwhile, with the combination of compressive sensing (CS) and Fibonacci-Lucas transform (FLT), a novel image compression and encryption scheme is proposed with the advantages of the 1D hybrid chaotic map. The whole encryption procedure includes compression by compressed sensing (CS), scrambling with FLT, and diffusion after linear scaling. Bernoullimeasurement matrix in CS is generated by the proposed 1D hybrid chaoticmap due to its excellent uniform distribution. To enhance the security and complexity, transform kernel of FLT varies in each permutation round according to the generated chaotic sequences. Further, the key streams used in the diffusion process depend on the chaotic map as well as plain image, which could resist chosen plaintext attack (CPA). Experimental results and security analyses demonstrate the validity of our scheme in terms of high security and robustness against noise attack and cropping attack.

关键词： COMPRESSED sensing (Signal processing) DISCRETE uniform distribution ONE-dimensional flow FOURIER transforms CHAOS theory encryption protocols INVESTMENT analysis

来源：评论

学校读者我要写书评

暂无评论

A survey of methods for encrypted traffic classification and analysis (vol 25, pg 355, 2015)

引用

INTERNATIONAL JOURNAL OF NETWORK MANAGEMENT 2015年第6期25卷 526-527页

作者： Velan, P. Cermak, M. Celeda, P. Drasar, M. Institute of Computer Science Masaryk University Brno Czech Republic

With the widespread use of encrypted data transport, network traffic encryption is becoming a standard nowadays. This presents a challenge for traffic measurement, especially for analysis and anomaly detection methods, which are dependent on the type of network traffic. In this paper, we survey existing approaches for classification and analysis of encrypted traffic. First, we describe the most widespread encryption protocols used throughout the Internet. We show that the initiation of an encrypted connection and the protocol structure give away much information for encrypted traffic classification and analysis. Then, we survey payload and feature-based classification methods for encrypted traffic and categorize them using an established taxonomy. The advantage of some of described classification methods is the ability to recognize the encrypted application protocol in addition to the encryption protocol. Finally, we make a comprehensive comparison of the surveyed feature-based classification methods and present their weaknesses and strengths. Copyright ? 2015 John Wiley & Sons, Ltd.

关键词： encrypted traffic monitoring network traffic classification traffic analysis machine learning encryption protocols

来源：评论

学校读者我要写书评

暂无评论

Systematic construction of genuine-multipartite-entanglement criteria in continuous-variable systems using uncertainty relations

引用

Physical Review A 2015年第5期92卷 052316-052316页

作者： F. Toscano A. Saboia A. T. Avelar S. P. Walborn Instituto de Física Universidade Federal do Rio de Janeiro Caixa Postal 68528 Rio de Janeiro RJ 21941-972 Brazil Instituto de Física Universidade Federal de Goiás Caixa Postal 131 Goiânia GO 74001-970 Brazil

A general procedure to construct criteria for identifying genuine multipartite continuous-variable entanglement is presented. It relies on the definition of adequate global operators describing the multipartite system, the positive partial transpose criterion of separability, and quantum-mechanical uncertainty relations. As a consequence, each criterion encountered consists of a single inequality that is nicely computable and experimentally feasible. Violation of the inequality is a sufficient condition for genuine multipartite entanglement. Additionally, we show that the previous work of van Loock and Furusawa [P. van Loock and A. Furusawa, Phys. Rev. A 67, 052315 (2003)] is a special case of our result.

关键词： QUANTUM systems RESEARCH ENTANGLEMENT network (Polymers) EQUALITY QUANTUM computing encryption protocols

来源：评论

学校读者我要写书评

暂无评论

A Fingerprint encryption Scheme Based on Irreversible Function and Secure Authentication

引用

COMPUTATIONAL AND MATHEMATICAL METHODS IN MEDICINE 2015年第1期2015卷 1-10页

作者： Yang, Yijun Yu, Jianping Zhang, Peng Wang, Shulan Shenzhen Univ ATR Key Lab Natl Def Technol Shenzhen 518060 Peoples R China

A fingerprint encryption scheme based on irreversible function has been designed in this paper. Since the fingerprint template includes almost the entire information of users' fingerprints, the personal authentication can be determined only by the fingerprint features. This paper proposes an irreversible transforming function (using the improved SHA1 algorithm) to transformthe original minutiae which are extracted from the thinned fingerprint image. Then, Chinese remainder theorem is used to obtain the biokey from the integration of the transformed minutiae and the private key. The result shows that the scheme has better performance on security and efficiency comparing with other irreversible function schemes.

关键词： encryption protocols FINGERPRINTS CHINESE remainder theorem SECURITY management ALGORITHMS BIOMETRIC identification

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：